iptables and X (KDE)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi all,
I already posted this message to the list but "murphy" decided it wasn't
written well enough (just to say it never arrived!).
I'm quite a newbie about firewalling. So, please, be patient.
I attached my iptables rules and I wonder if someone could help me
understanding why it doesn't allow me start X (KDE, in my case).
I suppose because of its very restrictive policies (DROP almost everything!).
Are PREROUTING and POSTROUTING involved? I thought they should only be
interested in masqueraded traffic arriving and leaving from a specific
interface (such as eth0 or ppp0), not in letting me start KDE!
Does xfs need to be allowed to connect to its port (7100)?
I've tried for days and days without any rilevant result.
I'm using woody on a laptop, but I'm thinking about preparing a woody box to
be used as a router/firewall on my little LAN and I'd like to be ready to do
this without this kind of problems!
Really thanks in advance.
Take care.
Matteo
- --
Matteo Vescovi
Email: mbishops(at)tiscali(dot)it
GPG Key: http://web.tiscali.it/revese/dhc_key.asc
Fingerprint: 18CE 32E6 399B 8212 549E 1E1F C299 A22E 184C 01CA
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE++z1cwpmiLhhMAcoRAkXkAKCswsgX2M3lvp3FIkOigJXYIBvY0wCgxghp
DCQ3+387nIR4mjpcLK5Kyms=
=COAO
-----END PGP SIGNATURE-----
# Generated by iptables-save v1.2.6a on Sat Jun 21 20:25:11 2003
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
[0:0] -A INPUT -i lo -j ACCEPT
[0:0] -A INPUT -d 127.0.0.1 -p tcp -m tcp --dport 25 -j ACCEPT
[0:0] -A INPUT -s 127.0.0.1 -p tcp -m tcp --sport 631 -j ACCEPT
[0:0] -A INPUT -i ppp0 -p icmp -m icmp --icmp-type 0 -j ACCEPT
[0:0] -A INPUT -i ppp0 -p icmp -m icmp --icmp-type 3 -j ACCEPT
[0:0] -A INPUT -i ppp0 -p icmp -m icmp --icmp-type 11 -j ACCEPT
[0:0] -A FORWARD -i ppp0 -m state --state INVALID,NEW -j DROP
[0:0] -A OUTPUT -s 192.168.1.255 -j DROP
COMMIT
# Completed on Sat Jun 21 20:25:11 2003
# Generated by iptables-save v1.2.6a on Sat Jun 21 20:25:11 2003
*nat
:PREROUTING DROP [0:0]
:POSTROUTING DROP [0:0]
:OUTPUT DROP [0:0]
[0:0] -A POSTROUTING -s 192.168.1.0 -o ppp0 -j MASQUERADE
[0:0] -A OUTPUT -s 192.168.1.255 -j DROP
COMMIT
# Completed on Sat Jun 21 20:25:11 2003
Reply to: